Overview

overview

10

Static

static

7

aa226ab5c6...a1.exe

windows7-x64

10

aa226ab5c6...a1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aa226ab5c6754cbbf77de7e20a0bf76529cd7a7b1066df846c15aa89f6cbd0a1.zip

  • Size

    285KB

  • MD5

    db2495ef28f8b32e927c048526b60af3

  • SHA1

    60ee8de6255da85f99d1670a8f59fa41bc64531a

  • SHA256

    44b6943b892a5d5268857efa67cd5a2afe60852bd321aceba607ada1fed0d2cd

  • SHA512

    ce243a4a8b330290a4d98a7ee677217a02eb9066ddc499f1d3cc52d70289d36f13e3090acce65e73de03ff631d771cd6dbc284a5be0fc1834d0c059f8c01b7f5

  • SSDEEP

    6144:uZxigbPAl9P7e6SHZpG/W6wZ8EavbmK9jxRtwAjk3t7c4699T5w:uZzWDGfPZ8EaTXnfjk3t7+99T5w

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aa226ab5c6754cbbf77de7e20a0bf76529cd7a7b1066df846c15aa89f6cbd0a1.zip
    .zip

    Password: infected

  • aa226ab5c6754cbbf77de7e20a0bf76529cd7a7b1066df846c15aa89f6cbd0a1.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections